search

tlswg / draft-ietf-tls-esni

TLS Encrypted Client Hello
https://tlswg.github.io/draft-ietf-tls-esni/#go.draft-ietf-tls-esni.html
Other
231 stars 56 forks source link

Minor nit: This is static DH, not DHE #140

Closed jb-wisemo closed 5 years ago

jb-wisemo commented 5 years ago

Since the mechanism is essentially static DH key mode (with ephemeral client key), the text should not refer to it as DHE / ECDHE, as those acronyms indicate that both sides use a fresh ephemeral (EC)DH key for each connection, when the client-facing server is in fact using a fixed key (which may be rotated a lot more often than a key from a certificate).

chris-wood commented 5 years ago

We'll likely address this by adopting notation and terminology from HPKE. See #145.